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Current Claims Schedule 

1 1-59. (Cancelled) 

1 60. (Currently Amended) A method of electronically negotiating an END, sold by a seller to a 

2 buyer, in which th e buyer splits the END electronically into two or more parts and then negoti 

3 ates those parts s e parat e ly to one or more further buyers without the involvement of a trusted 

4 third party (TTP). the method comprising: 

5 providing said seller with seller tamper-resistant document carrier hardware, said seller 

6 tamper-resistant document carrier hardware having its own public-secret key pair, and wherein 

7 said secret key is not accessible to said seller, said seller tamper-resistant document carrier bear- 

8 ing said END and a signature calculated using said secret key; 

9 providing said buyer with buyer tamper-resistant document carrier hardware, said buyer 

10 tamper-resistant document carrier hardware having its own public-secret key pair, and wherein 
n said secret key is not accessible to said buyer; 

12 transferring said END from said seller tamper-resistant document carrier hardware to said 

13 buyer tamper-resistant document carrier hardware; 

14 splitting said END electronically in said buyer tamper-resistant document carrier hard- 

15 ware into two or more new ENDs each having a value such that the sum of the values of the new 

16 ENDs adds up to a value of said END; 

n digitally signing said splitting using said secret key of said buyer tamper-resistant docu- 

18 ment carrier hardware to generate a splitting signature; and 

19 negotiating said new ENDs separately to one or more further buyers without the in- 

20 volvement of a trusted third party (TTPV 

1 61 . (Currently Amended) A -The m ethod as claimed in claim 60 , in which each part is subject e d 

2 to th e digital signature of the document carrier hardware of said buyer which e ffects th e splitting. 

3 wherein said digitally signing of said splitting comprises subjecting each said new END to said 

4 secret key of said buyer tamper-resistant document carrier hardware. 
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62. (New) The method as claimed in claim 60 wherein said END and said new ENDs each have 
an associated sequence number signed by a said secret key. 

63. (New) The method as claimed in claim 62 wherein said seller and said buyer tamper- 
resistant document carrier hardware each have a document carrier identifier signed by said secret 
key. 

64. (New) The method as claimed in claim 60 wherein said seller tamper-resistant document 
carrier hardware bears an issuing signature, and wherein said transferring includes transferring 
said issuing signature from said seller tamper-resistant document carrier hardware to said buyer 
tamper-resistant document carrier hardware. 

65. (New) The method as claimed in claim 64 further comprising deleting said issuing signature 
after said transferring. 

66. (New) Tamper-resistant document carrier hardware, said document carrier hardware having 
its own public-secret key pair, and wherein said secret key is not accessible to the owner of said 
tamper-resistant document carrier hardware, wherein said tamper-resistant document carrier 
hardware is configured to: store an END protected by a signature calculated using said secret 
key; split said END electronically into two or more new ENDs each having a value such that the 
sum of the values of the new ENDs adds up to a value of said END; and negotiate said new 
ENDs separately to one or more further buyers without the involvement of a trusted third party 
(TTP). 



